京东cfe滑块 分析

声明:
本文章中所有内容仅供学习交流使用，不用于其他任何目的，抓包内容、敏感网址、数据接口等均已做脱敏处理，严禁用于商业用途和非法用途，否则由此产生的一切后果均与作者无关！
逆向分析

headers = {
    "accept": "application/json, text/plain, */*",
    "accept-language": "zh-CN,zh;q=0.9",
    "cache-control": "no-cache",
    "content-type": "application/x-www-form-urlencoded;charset=UTF-8",
    "origin": "",
    'cookie':f'',
    "pragma": "no-cache",
    "priority": "u=1, i",
    "referer": "",
    "sec-ch-ua": "\"Chromium\";v=\"130\", \"Microsoft Edge\";v=\"130\", \"Not?A_Brand\";v=\"99\"",
    "sec-ch-ua-mobile": "?0",
    "sec-ch-ua-platform": "\"Windows\"",
    "sec-fetch-dest": "empty",
    "sec-fetch-mode": "cors",
    "sec-fetch-site": "same-site",
    "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0",
    "x-rp-client": "h5_1.0.0"
}
with open('b1.jpg','rb') as fp:
    background_bytes = fp.read()
with open('b2.png','rb') as fp:
    target_bytes = fp.read()
res = det.slide_match(target_bytes, background_bytes, simple_target=True)
distance = round(res['target'][0])
result = cp.call('verify',distance,sid,imgJsonStr,st)
data = result['data']
url = "/api/check"

response = session.post(url, headers=headers, data=data)
data = response.json()
print(data)

结果

总结

  1.出于安全考虑,本章未提供完整流程,调试环节省略较多,只提供大致思路,具体细节要你自己还原,相信你也能调试出来。